Skip to content
Snippets Groups Projects
Commit 5939dc8d authored by Janis Danisevskis's avatar Janis Danisevskis Committed by android-build-merger
Browse files

Merge "Fix sepolicy for Gatekeeper HAL" am: 9d5f97b3

am: dfded77d

Change-Id: I3a6e966ad54f4ea505dacb5c60269cc733e9212c
parents 52c5bde4 dfded77d
No related branches found
No related tags found
No related merge requests found
...@@ -15,7 +15,6 @@ allow gatekeeperd system_file:dir r_dir_perms; ...@@ -15,7 +15,6 @@ allow gatekeeperd system_file:dir r_dir_perms;
### Rules needed when Gatekeeper HAL runs outside of gatekeeperd process. ### Rules needed when Gatekeeper HAL runs outside of gatekeeperd process.
### These rules should eventually be granted only when needed. ### These rules should eventually be granted only when needed.
hwbinder_use(gatekeeperd)
hal_client_domain(gatekeeperd, hal_gatekeeper) hal_client_domain(gatekeeperd, hal_gatekeeper)
### ###
......
# call into gatekeeperd process (callbacks) binder_call(hal_gatekeeper_client, hal_gatekeeper_server)
# TODO: This rules is unlikely to be needed because Gatekeeper HIDL
# says there are no callbacks
binder_call(hal_gatekeeper, gatekeeperd)
# TEE access. # TEE access.
allow hal_gatekeeper tee_device:chr_file rw_file_perms; allow hal_gatekeeper tee_device:chr_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment